Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows
    remote attackers to read source code for server files or bypass certain protections, a variant of
    CAN-2002-1148. (CVE-2002-1394)

A security vulnerability has been confirmed to exist in Apache Tomcat 4.0.x releases, which allows to use a specially crafted URL to return the unprocessed source of a JSP page, or, under special circumstances, a static resource which would otherwise have been protected by a security constraint, without the need for being properly authenticated. This is based on a variant of the exploit that was identified as CAN-2002-1148.

The version of Apache Tomcat running on the remote host is affected by an information disclosure vulnerability. It is possible to view source code using the default servlet :

  org.apache.catalina.servlets.DefaultServlet

A remote attacker can exploit this information to mount further attacks.

This version of Tomcat reportedly affected by additional vulnerabilities; however, Nessus has not checked for them.

ID	Name	Product	Family	Type	Severity
434178	SCA: security update for org.apache.tomcat:tomcat (GHSA-8v5p-2cpv-c2x6)	Tenable Cloud Security	SCA Checks	Local	high
434178	SCA: security update for org.apache.tomcat:tomcat (GHSA-8v5p-2cpv-c2x6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
15062	Debian DSA-225-1 : tomcat4 - source disclosure	Nessus	Debian Local Security Checks	Local	high
11176	Apache Tomcat Catalina org.apache.catalina.servlets.DefaultServlet Source Code Disclosure	Nessus	CGI abuses	Remote	medium

Detections

Analytics

CVE-2002-1394

high

Tenable Plugins

high

high

high

medium